create and authenticate user